Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.

Global Accelerated Learning • Est. 1999
Glossary Term Anti-Forensics

Training Camp • Cybersecurity Glossary

What is Anti-Forensics?

Anti-forensics covers techniques like log wiping, timestomping, and encryption that attackers use to defeat digital forensic investigation and analysis.

Glossary > Incident Response & Forensics > Anti-Forensics

Understanding Anti-Forensics

Anti-forensics refers to techniques attackers use to obstruct, mislead, or defeat digital forensic investigation and incident response. Common methods include log deletion and tampering, timestamp manipulation known as timestomping, data wiping, encryption, steganography, and the use of memory-only or fileless malware to avoid leaving disk artifacts. The goal is to destroy evidence, hinder attribution, or extend dwell time before detection.

Learn More About Anti-Forensics:

Ready to Get Certified?

Turn knowledge into credentials with our instructor-led cybersecurity boot camps.

View All Courses →